The above system provides a proof of submission and proof of delivery technique 
that employs a third party key provider. It should be understood that the implementation 
of other variations and modifications of the invention in its various aspects will be 
apparent to those of ordinary skill in the art, and that the invention is not limited by the 
specific embodiments described. For example, it will be recognized that if the third party 
public key is of sufficient length, then the security token 46 may be encrypted directly 
using the third party public key. Also, the operations of the various units may be 
performed by other units. For example, the key request reply 26 and the verifier 57 can 
be moved to the third party and the third party transfers the token 46 to the recipient 
processor to facilitate distributed processing. It is therefore contemplated to cover by the 
present invention, any and all modifications, variations, or equivalents that fall within the 
spirit and scope of the basic underlying principles disclosed and claimed herein. 

Claims 

What Is Claimed Is: 

lS^ A method for securely communicating data comprising the steps of: 

(a) providing, by a first party, a double key package to a second party; 

(b) communicating, by the second party, the double key package to a 
third party; and 

(c) ^stecrypting, in part, the double key package to recover a decryption 
key for thes^cond party using a third party based decryption key to 
facilitate mandaha^y communication between the second party and the 
third party and decry|>tion of data based on the recovered decryption key. 

2. The method of claim 1 including the >&teps of: 

receiving the double key package bv the second party; and 
communicating the recovered decryption key package to the second party. 
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3\ The method of claim 1 wherein the double key package includes the decryption 
cey that is used to decrypt the encrypted data protected through a double 
application of asymmetric public key encryption. 



The method of claim 3 wherein the decryption key is a symmetric key and 
wherein the double application of asymmetric public key encryption is performed 
using a public keysassociated with the second party while another application of 
asymmetric public ke^encryption uses a public key associated with the third 
party. 
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The method of claim 1 in including the steps of: 

generating cipher text by enciypting data with a first cryptographic key 
(Ksl) bytte first party; 

providin^ie cipher text to the secdnd party; 

encrypting the autographic key (Ks lousing a second encryption key 
associated with the second parfy^o produce a firstskey package; and 

encrypting the first key packag^u^ng a thiro^ncryption key associated 
with the third party to the produce a double ke^packagi 



20 6. The method of claim 1 in including the steps of: 

generating cipher text by encrypting data with a first cryptographic key 
(Ksl) by the first party; 

providing the cipher text to the second party; 

encrypting the cryptographic key (Ksl) using a second encryption key 
25 associated with the second party to produce a first key package; 

encrypting the first key package using a third encryption key associated wifij the 
third party to the produce an encrypted first key package; and 

encrypting the third encryption key with a fourth encryption key associated withN 
the third party to produce a second key package, 
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wherein the double key package includes the second key package and the 
\encrypted first key package. 
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7. \ The method of claim 6 wherein the first cryptographic key is a symmetric key, the 
secoiM encryption key is an asymmetric public key, the third encryption key is a 
symmetric key and the fourth encryption key is an asymmetric public key. 

8. The method of claim 1 including the step of recording, by the third party, receipt 
of the double K^y package from the second party to facilitate message data delivery 
tracking. 
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The method o^Rclaim 7 including the steps of: 

generating message delivery status data, by the third party, in response to a 
signed status request; 

processing the^signed status request by verifying a digital signature on the 
signed request; and 

determining authorization of a party seeking the request based on 

identification data obtained from the signed request. 
10. A method for securely cWimunicating data comprising the steps of: 

(a) providing, by a fir^party, message data and a double key package 
to a third party; 

(b) providing, by the third p^fty, the message data and the double key 
package to a second party; 

(c) receiving back from the seco^J party, by the third party, the double 
key package; 

(d) decrypting, in part, the double key^package using a third party 
decryption key to recover a decryption key for the second party to provide 
mandatory communication between the second party md the third party; and 

(e) communicating the recovered decryptionxey package to the 
second party to enable decryption of the message data by the second party. 
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il . The method of claim 10 including the step of providing time stamp data by the 
third party to the first party based on receipt of the message data and the double key 
package. 

^The method of claim 10 in including the steps of: 

generating cipher text by encrypting data with a first cryptographic key 
1)^3^ the first party; 

providing the cipher text to the second party; 
icrypting thecryptographic key (Ksl) using a second encryption key 
associated with the secona>qrty to produce a first key packaging; and 

encrypting the first key pafckage using a third encryption key associated 
with the third>party to the produce a double^ey package. 



13. The method of clMm 10 in including the steps of: 

generating cipher text by encrypting data with a first cryptographic key 
(Ksl) by the first pa 

providing the cipher text to the second party; 
encrypting the cryptographic key (Ksl) using a second encryption key 
associated with the second party to produce a first key package; 
encrypting the first key package using a third encryption key associated with the 
third party to the produce an encrypted 35rst key package; and 

encrypting the third encryption keVwith a fourth encryption key associated with 
the third party to produce a second key package, 

wherein the double key package includes the second key package and the 
encrypted first key package. 

14. The method of claim 13 wherein the first cryptographic key is a symmetric key, 
the second encryption key is an asymmetric public key^he third encryption key is a 
symmetric key and the fourth encryption key is an asymmetric public key. 
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15. The method of claim 10 including the step of recording, by the third party, receipt 
of the double\ey package from the second party to facilitate message data delivery 
tracking. 
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16. The method of claiha 10 including the steps of: 

generating message delivery status data, by the third party, in response to 
authorized status request dab 

processing the authoriz&^status request by verifying the authorized 
request; and 

determining authorization of a phrty seeking the request based on 
identification data obtained from the authon^d request. 



1 7. The method of claim 1 6 wherein the authorized reque^s a signed request. 
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An apparatus for securely communicating data comprising: 

a first party cryptographic engine, operatively coupled to receive data for 
encryption, and adapted to produce a double key package wherein the double key 
packageVncludes a decryption key that is used to decrypt the encrypted data protected 
through a^ouble application of asymmetric public key encryption; and 

a combiner, operatively coupled to combine the double key package with 
the ciiHier text. 

19. The appar^his of claim 18 wherein the first party cryptographic engine generates 
cipher text by encrypting the data with a first cryptographic key (Ksl) , encrypts the first 
cryptographic key (Ksm using a second encryption key associated with a second party to 
produce a first key package, and encrypts the first key package using a third encryption 
key associated with a thircroparty to the produce the double key package. 



m 15 



20. The apparatus of claim\J9 including a digital signor that applies a digital signature 
associated with a first party to atSleast one of the double key package and the cipher text 
to produce a signed message with\third party based encrypted security token. 



2 1 . The apparatus of claim 1 8 including: 
20 a delivery status request g^perator that generates authorized proof of 

delivery request data for the third party; 

a proof of delivery analyzer opWatively coupled to receive proof of 

delivery data based on third party receipt of the Rouble key package and the authorized 

delivery request data, and 
25 a request verifier operative to verify authorization data associated with the 

proof of delivery data. 



22. The apparatus of claim 21 wherein the authorizatio\data includes digital 
signature data. 



30 



19 



23\ An apparatus for securely communicating data comprising: 

\ a double key package evaluator wherein the double key package is 

generate&sby a first party; and 

\ a double key package decryptor that partially decrypts the double key 
package to recoyer a decryption key package for a second party using a third party based 
decryption key to racilitate mandatory communication between the second party and the 
third party and decryptkm of data based on the recovered decryption key. 

24. The apparatus of clairrr^3 wherein the double key package decryptor 
communicates the recovered decryjsrtion key package to the second party. 

25. The apparatus of claim 24 including a time stamp generator providing time 
stamp data to the first party based on rbqeipt of message data and the double key 
package from a second party. 

26. The apparatus of claim 23 a time stamp generator providing time stamp data to 
the second party indicating when the first party sent message a^a to the third party. 
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11. An apparatus for securely communicating data comprising: 

a first party cryptographic engine, operatively coupled to receive data for 
encryption, and adapted to produce a double key package wherein the double key 
packagkincludes a decryption key that is used to decrypt the encrypted data protected 
through a Rouble application of asymmetric public key encryption; 

a combiner, operatively coupled to combine the double key package with 
the cipher text;\ 

a double key package evaluator; and 
a double key package decryptor that partially decrypts the double key 
package to recover a decryption key package for a second party using a third party based 
decryption key to facilitate mandatory communication between the second party and the 
third party and decryption erf data based on the recovered decryption key. 



28. The system of claim 27 including a digital signor that applies a digital signature 
15 associated with a first party to theMouble key package and the cipher text to produce a 
signed message with a third party ba^ed encrypted security token. 
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29. The apparatus of claim 27 includr 

a delivery status request genbfator that generates authorized delivery 
request data for the third party; 

a proof of delivery analyzer operkively coupled to receive proof of 
delivery data based on third party receipt of the double key package and the authorized 
delivery request data, and 

a verifier operative to verify the proof oK4elivery data. 

30. The apparatus of claim 29 wherein the double key package decryptor 
communicates the recovered decryption key package to the second party. 
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^32. A storage medium containing data representing executable instructions 
Comprising: 

first memory containing data representing executable instructions that cause a 
processing device to provide, by a first party, a double key package to a second party; 

second memory containing data representing executable instructions that cause a 
processing device to communicate the double key package to a third party; and to 
partially decrypt the double key package to recover a decryption key for the second party 
using a third party based decryption key package to facilitate mandatory communication 
between the secbnd party and the third party and decryption of data based on the 
recovered decryption key. 
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33. The storage medium of claim 32 including data representing executable 
instructions that Cause a processing device to receive the double key package by 
the second party; an^ communicate the recovered decryption key package to the 
second party. 

34. The-stQrage medium of clalfcp 32 including data representing executable 
instructions that cause a procesSmg-d^yice to 

35. The storage medium of claim 32 including data representing executable 
instructions that cause a processing device to> 

generate cipher text by encryptirijg data with a first cryptographic key 
(Ksl) by the first party; 

provide the cipher text to the second ^ 

encrypt the cryptographic key (Ksl) usiAg a second encryption key 
associated with the second party to produce a first T^y package; and 

encrypt the first key package using a third eno^rption key associated with 
the third party to the produce a double key package. 
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\36. The storage medium of claim 32 including data representing executable 
instructions that cause a processing device to provide the double key package to include 
the de^yption key that is used to decrypt the encrypted data protected through a double 
applicatioh^f asymmetric public key encryption. 
5 \ 

37. The storage rhodium of claim 36 wherein the decryption key is a symmetric key and 
wherein the doubde application of asymmetric public key encryption is performed 
using a public key associated with the second party while another application of 
asymmetric public key^ncryption uses a public key associated with the third party. 

10 \ 

38. The storage medium of claimv32 including data representing executable . 
instructions that cause a processing device to record, by the third party, receipt of the 
double key package from the second party^ facilitate message data delivery tracking. 

15 39. The storage medium of claim 32 including data representing executable 

instructions that cause a processing device to genbrate message delivery status data, by 
the third party, in response to a signed status requestporocess the signed status request by 
verifying a digital signature on the signed request; and determine authorization of a party 
seeking the request based on identification data obtained fromJhe signed request. 

20 \ 
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,40. A method for securely communicating data comprising the steps of: 

(a) providing, by a first party, a double key package to a second party; 

(b) communicating, by the second party, the double key package to a 
third ^arty; and 

(c) decrypting, in part, the double key package to recover a decryption 
key package for the second party using a third party based decryption key 
to facilitate mandatory communication between the second party and the 

rd party and decryption of data based on the recovered decryption key. 



10 41. The method of claim 40 including the steps of: 

receiving^ the double key package by the second party; and 
communicating the recovered decryption key package to the second party. 

42. The method of claim 40 w\erein the double key package includes the decryption key 
15 that is used to decrypt the endnpted data protected through a double application of 

asymmetric public key encryptic 

43. The method of claim 42 wherein the decryption key is a symmetric key and wherein 
the double application of asymmetric public key encryption is performed using a 

20 public key associated with the second party^while another application of asymmetric 
public key encryption uses a public key associated with the third party. 



44. The method of claim 40 in including the steps < 

generating cipher text by encrypting data ^ith a first cryptographic key 
25 (Ksl) by the first party; . 

providing the cipher text to the second party; 

encrypting the cryptographic key (Ksl) using a second encryption key 
associated with the second party to produce a first key pacBage; and 

encrypting the first key package using a third encryption key associated 
30 with the third party to the produce a double key package. 
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45. \ The method of claim 40 in including the steps of: 

\ generating cipher text by encrypting data with a first cryptographic key 

(Ksls) by the first party; 

^providing the cipher text to the second party; 
encrypting the cryptographic key (Ksl) using a second encryption key 

associated with the second party to produce a first key package; 

encrypting the first key package using a third encryption key associated with the 
third party to the produce an encrypted first key package; and 

encrypting the third ewyption key with a fourth encryption key associated with 
the third party to produce a seconfcUcey package, 

wherein the double key package includes the second key package and the 
encrypted first key package. \ 

46. The method of claim 45 wherein the fira cryptographic key is a symmetric key, 
the second encryption key is an asymmetric publioJcey, the third encryption key is a 
symmetric key and the fourth encryption key is an asymmetric public key. 

47. The method of claim 40 including the step of recording, by the third party, receipt 
of the double key package from the second party to facilitate mb^sage data delivery 
tracking. \ 
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